Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa
File: XD1HoodBiMInvRTxnJ-F8bz7E6g.roa (raw, json)
Hash identifier: +MCC/E1hZWlDAFHm+uYLJWzIYP9eeKSUMfJFrwSc0Ks=
Subject key identifier: 5C:3D:47:A2:87:41:88:C2:27:BD:14:F1:9C:9F:85:F1:BC:FB:13:A8
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018366FD23342857E8AABA9DA98EB2002E83
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa
Signing time: Thu 22 Sep 2022 20:56:49 +0000
ROA not before: Thu 22 Sep 2022 20:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202732
IP address blocks: 2a06:a005:1501::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:66:fd:23:34:28:57:e8:aa:ba:9d:a9:8e:b2:00:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 22 20:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c3d47a2874188c227bd14f19c9f85f1bcfb13a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:74:90:df:17:5a:91:07:49:a2:cd:64:10:
4d:57:64:09:94:f6:12:f0:ec:94:d1:b8:6c:8e:67:
2f:83:21:14:e1:d8:2e:c1:5a:e3:5b:d6:61:d4:d4:
ea:6f:97:ab:73:98:12:8a:85:55:51:88:8c:ff:fb:
0a:f6:16:92:bf:7c:26:6d:6a:0c:1b:db:3f:ed:08:
4c:56:2b:a2:96:fb:e2:68:d6:aa:7d:f3:34:5a:ad:
17:69:c0:88:07:8f:a1:ae:e1:48:63:fc:6b:e6:6f:
42:37:87:53:c3:f3:95:5d:9f:08:87:a8:81:7c:c7:
9d:4f:fb:16:e4:cf:fc:d3:ae:54:8d:19:7a:f0:d7:
47:46:60:ac:59:87:e8:69:4c:8e:d8:2f:d5:dc:3b:
01:3a:74:a3:0d:d1:39:24:2c:d4:26:b9:a0:6e:6f:
a7:47:7f:57:b1:1e:3c:79:cc:60:bf:d7:e2:9b:ba:
0d:d9:67:b8:4b:52:46:cc:3d:db:74:20:bb:14:7b:
33:75:9a:b5:e8:87:94:d9:73:63:55:a2:b0:af:aa:
b9:d8:2c:22:ed:04:f2:7c:cc:e7:e0:4a:1c:b3:81:
9e:59:4f:32:19:96:a3:2b:89:d0:0b:92:b7:e7:a6:
a3:94:bb:9f:18:4d:b6:49:22:09:56:3d:aa:75:9d:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:47:A2:87:41:88:C2:27:BD:14:F1:9C:9F:85:F1:BC:FB:13:A8
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XD1HoodBiMInvRTxnJ-F8bz7E6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1501::/48
Signature Algorithm: sha256WithRSAEncryption
85:fb:ca:61:48:ac:cb:63:cf:11:4c:ad:ab:9e:85:ad:0e:09:
72:21:cf:d7:01:e0:14:e7:2d:72:10:24:28:39:c7:04:3f:b0:
a7:40:b6:20:a9:29:7e:91:76:53:98:52:ca:73:87:68:a9:71:
66:af:21:df:d5:ae:0b:35:de:61:93:e8:d7:bd:dc:7f:3b:1f:
16:de:e0:ac:fd:03:f9:93:94:00:ee:73:31:57:8e:52:8d:49:
a9:43:fe:5b:91:ea:a4:bb:64:48:8d:e5:44:f7:66:46:d3:19:
41:24:63:46:5e:bc:e1:43:58:df:44:94:30:d6:78:b4:2f:22:
64:b3:62:bd:f1:6f:95:98:31:b2:e1:63:ac:6b:51:42:29:e9:
36:28:d1:b5:b5:13:39:68:7a:eb:b8:e3:a8:22:a6:70:c8:d6:
4d:4c:42:49:6c:da:bc:17:f9:bc:75:2e:de:9d:80:c1:9b:77:
72:8e:89:4b:17:8b:63:2d:db:e0:cf:c0:f0:8e:9e:ac:45:ee:
71:94:0c:79:59:93:7f:5e:c5:92:bf:d9:e3:3a:99:a9:6b:42:
84:c9:5e:7a:ae:c9:dc:65:34:7f:8b:88:8e:f7:f2:72:34:f4:
c4:c8:5c:0d:a3:6f:03:12:0f:cc:44:4c:8e:5a:9f:6e:fb:e5:
a2:cf:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:11 2025 by rpki-client